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METHOD AND SYSTEM FOR PROTECTING AND AUTHENTICATING A 

DIGITAL IMAGE 

FIELD OF INVENTION 

5 

The present invention relates broadly to a method and system for 
protecting a digital image, to a method and system for authenticating a digital 
image, to a computer readable data storage medium having stored thereon 
computer program code means for instructing a computer to execute a method of 
10 protecting a digital image, and to a computer readable data storage medium 
having stored thereon computer program code means for instructing a computer 
to execute a method of authenticating a digital image 

BACKGROUND 

15 

Stemmed from traditional cryptography, the requirements for preventing two 
kinds of frauds are usually expected for the purposes of content-based 
authentication. One is to prevent the forging from the recipient to make his attacks 
pass the authentication. The other is to prevent repudiation of the transmission of the 
20 content by the owner. Once you sign on it, you cannot deny it anymore. Based on 
these two requirements mentioned above, the state-of-art techniques for protecting 
images such as JPEG2000 images against unauthorized modifications can mainly be 
categorized into two classes: watermarklng-based authentication and signature- 
based authentication. 

25 

Refer to Figure 1, the watermarking-based solutions accomplish content 
authentication by embedding a noise-like signal 100 into the content 102 itself in an 
imperceptible way. The original content 102 may need to be transformed as well as 
the watermark 100 (embedding information). Usually a secret key 104 is used for 
30 making the embedding more secure. In the procedure of watermark extraction, by 
comparing the correlation results between the original content 102 and watermarked 
content 106, or practically, between the extracted watermark and that re-produced 
from keying the same watermark information as embedding, the authentication result 
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can then be obtained even to locate the malicious manipulations. Fragile 
watennarking schemes perfomi well on authenticating images in temns of system 
security. Another advantage of watermarking-based solutions is its transparent 
storage property. However, when one needs to authenticate the images in a semi- 
5 fragile or robust way, the s^tem security issue, although having been somehow 
addressed, is still far from the most of practical applications because watermarking 
always needs to balance between two vital system requirements: robustness and 
security. 

Refer to Figure 2, the signature-based solutions achieve the purposes of 
content authentication by modifying traditional cryptography algorithms from 
authenticating message to authenticating the content. After features 200 are 
extracted from the original content 202, usually hashing 204 is needed for security 
purpose as well as for storage concerns, the content owner can sign on them (hash 
204) to fonm a signature 208 for the said content and then send the content 202 
together with the signature 208 to the recipient. Later the recipient can show the 
authenticity of the content 212 to others by verifying the validity between the received 
signature 210 and that re-produced from the content 212 to be authenticated. 
Differing from watennarking-based solutions, signature-based solutions can adopt the 
well-known public key Infrastructure (PKI) for practical applications. The main 
advantages of signature-based solutions are their well-proved security properties 
mentioned above. However, the security performance is also determined by the 
representation quality of extracted features 200 of the said content 202. For example, 
histogram and edge map may be Important features in images, but if they are taken 
as extracted features for authentication, one can easily fake the images without 
changing their histogram and edge map. Another issue of signature-based solution is 
that they need an extra storage space. 

In providing an authentication solution for e.g. JPEG2000, the following 
30 requirements may be considered: secure to prevent the two main attacks on image 
integrity and source verification, robust to tame some incidental distortions such as 
format conversion and transcoding, minimum or zero extra storage, etc. Another 
practical yet very important issue for authentication may be how to define the 
expected authentication strength for content. 
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SUMMARY 

In accordance with a first aspect of tlie present invention there Is provided 
a method of protecting a digital image, the method comprising extracting feature 
5 values from the digital image based on a selected authentication bit-rate; 
embedding data corresponding to the feature values as a watermark into the 
digital image; and creating an image signature based on the data corresponding 
to the feature values. 

10 The method may further comprise the step of selecting a desired 

authentication robustness level, and error correcting coding the extracted feature 
values prior to embedding the data corresponding to the feature values into the 
digital image. 

15 The feature values from each of a plurality of codeblocks of the original 

digital image may be thresholded and coded to create the data corresponding to 
the feature values. 

The coding of the thresholded feature values may comprise ECC coding 
20 to generate parity check bits (PCBs) as the data corresponding to the feature 
values. 

The method may further comprise applying ECC coding again to the PCBs 
to generate the data corresponding to the feature values. 

25 

The creating of the image signature may comprise applying a 
cryptographic hashing function to a bit sequence representing the data 
corresponding to the feature values. 

30 The creating of the image signature may comprise utilising a private key. 



The method may further comprise distributing the digital image, including 
the embedded data, as the authentic digital image. 
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The method may further comprise coding the digital image, including the 
embedded data, utilising JPEG2000 compression. 

The extracting of the feature values, the embedding of the data 
5 corresponding to the feature values, and the creating of the image signature may 
be performed as part of the JPEG 2000 coding. 

In accordance with a second aspect of the present invention there is 
provided a method of authenticating a digital image, the method comprising 

10 extracting data embedded as a watermark in the digital image; extracting feature 
values from the digital image at a selected authentication bit-rate; processing the 
extracted data and extracted feature values to derive data corresponding to 
original feature values; and comparing the derived data corresponding to the 
original feature values with reference data derived from an image signature 

15 associated with the digital image. 

The deriving of the data corresponding to the original feature values may 
comprise enror correcting coding the extracted data and extracted feature values. 

20 The extracted data and extracted feature values from each of a plurality of 

codeblocks of the digital image may be decoded to derive the data corresponding 
to the original feature values. 

The extracted data may comprise RGBs, and the decoding of the 
25 extracted data and extracted feature values comprises ECC decoding. 

The method may further comprise applying ECC decoding twice to the 
extracted data. 

30 The method may further comprise applying a cryptographic technique to 

the image signature to derive a bit sequence representing the reference data. 

The method may further comprise applying a public key to process the 
image signature for deriving the reference data. 

35 
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The method may further comprise receiving the digital image as a coded 
digital image. 

The digital image may be coded utilising JPEG2000. 

5 

The extracting of the data embedded as a watermark, the extracting of the 
feature values from the digital image, the processing of the extracted data and 
extracted feature values to derive data corresponding to original feature values, 
and the comparing of the derived data corresponding to the original feature 
10 values with the reference data may be performed as part of the JPEG 2000 de- 
coding. 

In accordance with a third aspect of the present invention there is provided 
a system for protecting a digital image, the system comprising a feature value 
extractor device for extracting feature values from the digital image based on a 
selected authentication bit-rate; a watermarking device for embedding data 
corresponding to the feature values as a watermark into the digital image; and a 
processor device for creating an image signature based on the data 
corresponding to the feature values. 

In accordance with a fourth aspect of the present invention there is 
provided a computer readable data storage medium having stored thereon 
computer program code means for instructing a computer to execute a method of 
protecting a digital image, the method comprising extracting feature values from 
the digital image based on a selected authentication bit-rate; embedding data 
corresponding to the feature values as a watermark into the digital image; and 
creating an Image signature based on the data corresponding to the feature 
values. 

30 In accordance with a fifth aspect of the present invention there is provided 

a system for authenticating a digital image, the system comprising an extraction 
device for extracting data embedded as a watermark in the digital image; a 
feature value extractor device for extracting feature values from the digital image 
based on a selected authentication bit-rate; a processor device for processing the 

35 extracted data and the extracted feature values to derive data corresponding to 
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original feature values and for comparing the derived data corresponding to the 
original feature values with reference data derived from an image signature 
associated with the digital image. 

5 In accordance with a sixth aspect of the present invention there is 

provided a computer readable data storage medium having stored thereon 
computer program code means for instructing a computer to execute a method of 
authenticating a digital image, the method comprising extracting data embedded 
as a watermark in the digital image; extracting feature values from the digital 
10 image based on a selected authentication bit-rate; processing the extracted data 
and extracted feature values to derive data corresponding to original feature 
values; and comparing the derived data corresponding to the original feature 
values with reference data derived from an image signature associated with the 
digital image. 

15 

BRIEF DESCRIPTION OF THE DRAWINGS 



Embodiments of the invention will be better understood and readily 
apparent to one of ordinary skill in the art from the following written description, 
20 by way of example only, and in conjunction with the drawings, in which: 

Figure 1 illustrates a prior art watermarking based authentication scheme. 
Figure 2 shows signature based authentication scheme. 
Figure 3 is a flow chart illustrating an image authentication process in 
accordance with an embodiment of the present invention. 
25 Figure 4 is a schematic drawing illustrating signature signing and watermark 

embedding process flow in accordance with an embodiment of the present invention. 

Figure 5 is a schematic drawing illustrating a watermark extracting and 
signature verification process flow in accordance with an embodiment of the present 
Invention. 

Figure 6 is a flowchart illustrating a method of protecting a digital image in 
an example embodiment. 

Figure 7 is a flowchart illustrating a method of authenticating a digital 
image in an example embodiment 
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Figure 8 is a schematic drawing illustrating a computer system for 
implementing the method and system according to an embodiment of the present 
invention. 

5 DETAILED DESCRIPTION 

A system and framework for authenticating JPEG2000 images in an example 
embodiment of the invention with a pre-specified authentication bit-rate (ABR) 
includes selecting ABR for the given image, selecting the desired authentication 

10 robustness level, encoding it according to the appropriate JPEG2000 procedure and 
parameters, generating the content-based signatures with the given ABR, 
watermarking error correction codes back to the given image, and sending the 
watermarked JPEG2000 image together with its digital signature to the recipient for 
future verification. The example embodiment is not only compatible with Public Key 

15 Infrastructure (PKI) but also robust and flexible in typical JPEG2000 image related 
operations such as lossless-to-lossy mode switching, multi-cycle compression and 
transcoding (truncation and parsing). 

As mentioned above, one obstacle which affects cunrent authentication 
20 systems is that it is very difficult to well define to what extent to authenticate the 
content If one needs to compress the content, several options to control the target 
compression quality such as either compression bit-rate, or target compressed file 
size in bytes or compression visual quality etc are typically given. It would be 
advantageous if similar functionalities are provided in the content authentication 
25 system. The example embodiment seeks to provide this functionality. It is worthy 
noting here that although the authentication could be also measured by quantization 
step size, because of a large diversity of content, furthermore, usually the content will 
be stored in compressed form which is done by both quantization and entropy coding, 
the quantization-based measure for authentication is still not well descriptive and 
30 explicit. 

An authentication system in the example embodiment is illustrated in Figure 3. 
Given a target authentication bit rate (ABR) and authentication robustness level (e.g., 
fragile, lossless to lossy) as parameter 300, one digital signature 302 is generated 
35 from the image content 304 during JPEG2000 coding procedure 306. By running 
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EBCOT in an example embodiment, tlie whole protected content can be allocated in 
different subbands and different resolution levels based on the targeted ABR. If the 
required authentication robustness level is fragile, then a traditional signature module 
308 is called to generate its corresponding signature (This is a straightfonA^ard 
5 solution of traditional crypto signature). If the required authentication robustness level 
is lossless, then a robust signature module 310 with lossless data hiding function is 
called so that after signature verification, the image content can be exactly recovered 
assuming no transcoding is applied. If transcoding has been applied to the image, the 
JPEG2O00 image can still be verified but cannot be exactly recovered. If the required 
10 authentication robustness level is lossy, then a robust signature nodule 312 with lossy 
data hiding function is called to make the generated signature more robust to 
incidental distortions. The final outputs are a (watennarked) JPEG2000 image 314 
and its associated digital signature 302. 

15 The process for lossy semi-fragile content-based image authentication in the 

example embodiment will now be described. The lossless semi-fragile content-based 
image authentication in the example embodiment will not be described in detail, 
however, it will be appreciated by a person skilled in the art that those authentication 
are very similar, and instructions to implement one enables the person skilled in the 

20 art to implement the other. More specifically, lossy authentication utilises lossy 
watermarked embedding, whereas lossless authentication uses lossless 
watermarked embedding. 

in the examples embodiment,. signature generation / verification modules are 
25 mainly employed for content signing and authentication. Watermark embedding / 
extraction modules are only used for embedding and extracting ECC check 
information. Instead of directiy sending an original image to recipients, only the 
watermarked copy is send together with one signed digital signature whose length is 
usually very short (the signature size is only around 1024 bits regardless of the 
30 original image size). 

Refer to Figure 4, among four inputs: original image 400, JPEG2000 
compression bit-rate (CBR) 402 b, Lowest authentication bit-rate 404 (LABR) a and 
image sender's private key 406, CBR 402 is the mandatory input for compressing 
35 images into JPEG2000 format. In addition to the original image 400, only two inputs 
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are needed to generate the JPEG2000 image signature 408 in a content-based way: 
the private key 406 and the LABR 404 a. If a JPEG2000 image signature is 
generated with LABR value a, a new image with CBR b will be authentic as long as b 
is greater than a and the new image is derived from defined acceptable manipulations 
5 or transcoded (by parsing or truncation) from a compressed JPEG2000 image 410. 
The original image 400 first undergoes color transfomiation, wavelet transformation 
and quantization, which are all basic procedures in JPEG2000 encoding 412. EBCOT 
414 is then employed for bit plane fractionalizing / encoding 416, 418 and optimal bit 
rate control 420, 422. Content-based features are extracted 424 from the available 
10 fractionalized bit planes by assuming the image is encoded above LABR 404. 
Feature values from each codeblock are threshoided and ECC coded 426 to 
generate corresponding parity check bits (PCBs) 428. The PCBs are taken as the 
seed to form the block-based watemiark 430. 

15 The embedded watermark is preferably robust enough for extraction from 

received images under acceptable manipulations. Since incidental changes to the 
embedded watermarks might occur, ECC is applied in the examples embodiment 
again before the PCB data are embedded. The watemiark data for each block are 
embedded into either the same block or a different block. The watermark embedding 

20 location may also be determined based on the LABR value 404. Note only the PCB 
data 428 (not including the feature codes) are embedded in the watermarking 
process of the example embodiment. All codewords 432 (features together with their 
corresponding PCBs) from all resolution levels and all subbands are concatenated 
and the resulting bit sequence is hashed by a cryptographic hashing function such as 

25 MD5 or SHA-1, 434. The generated semi-fragile hash value can then be signed 436 
using the content sender's private key 406 to form the crypto signature 408. Differing 
from a data-based signature scheme in which the original data are sent to the 
recipients associated with its signature, in the example embodiment the watermarked 
image is send to the recipients instead of sending the original image 400. 

30 

Refer to Figure 5. To authenticate received image content 500, in addition to 
the image itself, two other pieces of information are needed in the example 
embodiment: the signature 502 associated with the image 500 (transmitted through 
external channels or as embedded watermarks), and the content sender's public key 
'35~ 504. The Image 500 is processed in the same way as content signing: decompose 
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and quantize image into blocks, to extract features for each bloclc. (Note that here it is 
assumed the JPEG2000 image has been decoded into raw Image and one is 
authenticating this raw image given IJVBR. If the image is stiii JPEG2000 
compressed, the features and watermarks can also be obtained in the EBCOT 
5 domain from the JPEG2000 decoding procedure). From those embedded watennarks 
510, one extracts the RGB data generated at the source site 512. Note that the 
features are computed 516 from the received image 500, while the RGBs are 
recovered from the watennarks 510 that are generated and embedded at the source 
site. After we combine the features and the corresponding RGBs to fonm codewords 
10 51 8 the whole content verification decision can be made. 

First, calculate the syndrome of the codeword block by block to see whether 
any blocks exist whose codewords are uncorrectable. If yes, then we claim the image 
is unauthentic and use the above EGG checking process to display alteration 

15 locations. If all codewords are correctable (i.e. errors in any feature code are 
correctable by its RGB), we repeat the same process as the source site: concatenate 
all corrected codewords into a global sequence and cryptographically hash 520 the 
result sequence. The final verification result is then concluded through a bit-by-bit 
comparison 524 between these two hashed sets (i.e., one is this new generated and 

20 the other is decrypted 526 from the associated signature 502 by the obtained public 
key 504): if any single bit differs, the verifier will deem the image unacceptable 
("unauthentic"). 

The procedure of signature generation and watermark embedding in the 
25 example embodiment involves: 

Selecting the authentication robustness levels: fragile, semi-fragile with 
lossless data hiding and semi-fragile with lossy data hiding. 

JREG2000 encoding the image based on coding parameters such as 
progression order, compression bit-rate, etc. 
30 Generating the content-based features with the given Authentication Bit-Rate 

(ABR). 

Employing error correcting coding scheme to tame the feature perturbations 
caused by some incidental noises or embedded watermarks, if semi-fragile 
authentication is selected. 
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Embedding the PCBs of all ECC codewords back to the image as 
watemiarks. Here, either lossy or lossless embedding is utilised, depending on 
whether semi-fragile lossless or lossy data hiding is chosen as the authentication 
robustness level. 
5 Applying crypto hash on all ECC codewords. 

Using image owner's private key to sign on the hash value and obtain the 
image signature. 

The procedure of watermark extraction and signature verification in the 
example embodiment involves: 
10 Selecting the authentication robustness levels: fragile, semi-fragile with 

lossless data hiding and semi-fragile with lossy data hiding. 

Generating the content-based features with the given authentication bit-rate 
from the decoded JPEG2000 image or encoding JPEG2000 image. 

Extracting the said watermarks from the image content. If the watermarking is 
15 lossless and no truncation is applied into JPEG2000 image, recover the JPEG2000 
image if necessary. 

Employing error correcting coding scheme on the generated features and 
extracted watermarks. If ECC fails, indicate the locations as possible attacks. 
Otherwise Applying crypto hash on all ECC codewords. 
20 Decrypting the associated image signature and obtain another set of hash 

Bit-bit comparison between these two hashes: if one bit difference exists, the 
image is deemed as unauthentic. 

Figure 6 is a flowchart illustrating a method of protecting a digital image in 
25 an example embodiment. At step 600, feature values are extracted from the 
digital image based on a selected authentication bit-rate. At step 602, data 
corresponding to the feature values is embedded as a watermark into the digital 
image, and at step 604 an image signature is created based on the data 
corresponding to the feature values. 

30 

Figure 7 is a flowchart illustrating a method of authenticating a digital 
image in an example embodiment. At step 700, data embedded as a watermark 
in the digital image is extracted. At step 701, feature values are extracted from 
the digital image based on a selected authentication bit-rate. At step 702, the 
35 extracted data and extracted feature values are processed to derive data 
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corresponding to original feature values, and at step 704, the derived data 
corresponding to the original feature values is compared with reference data 
derived from an image signature associated with the digital image. 

5 The method and system of the example embodiment can be implemented 

on a computer system 800, schematically shown in Figure 8. It may be 
implemented as software, such as a computer program being executed within the 
computer system 800, and instructing the computer system 800 to conduct the 
method of the example embodiment. 

10 The computer system 800 comprises a computer module 802, input 

modules such as a keyboard 804 and mouse 806 and a plurality of output 
devices such as a display 808, and printer 810. 

The computer module 802 is connected to a computer network 812 via a 
suitable transceiver device 814, to enable access to e.g. the Intemet or other 

15 network systems such as Local Area Network (LAN) or Wide Area Network 
(WAN). 

The computer module 802 in the example includes a processor 818, a 
Random Access Memory (RAM) 820 and a Read Only Memory (ROM) 822. The 
computer module 802 also includes a number of Input/Output (I/O) interfaces, for 
20 example I/O interface 824 to the display 808, and I/O interfoce 826 to the 
keyboard 804. 

The components of the computer module 802 typically communicate via 
and interconnected bus 828 and in a manner known to the person skilled in the 
relevant art. 

25 The application program is typically supplied to the user of the computer 

system 800 encoded on a data storage medium such as a CD-ROM or floppy 
disk and read utilising a corresponding data storage medium drive of a data 
storage device 830. The application program is read and controlled in its 
execution by the processor 818. Intermediate storage of program data maybe 

30 accomplished using RAM 820. 

The embodiment described may provide a system and method for content- 
based authentication against unauthorized modifications of the JPEG2000. 
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A system and method for authenticating JPEG2000 image in the embodiment 
described includes: selecting ABR for the given image, selecting the desired 
authentication robustness level, encoding it according to the appropriate JPEG2000 
procedure and parameters, generating the content-based signatures with the given 
5 ABR, watermarking error con^ctlon codes back to the given image, finally sending 
the watermarked JPEG2000 image associated with its digital signature to the 
recipient for future verification. 

Typical applications of the authentication framework of the embodiment 
10 described include, but are not limited to: 

Content streaming: Protecting the Integrity of the streamed content under 
given authentication bit-rate. The streaming could be done In several ways such as 
streaming the content into a buffer with bit-rate A later streaming it into the client with 
bit-rate B. As long as the all streamed bit-rates in terms of the original file size are 
15 greater than the said authentication bit-rate, the streamed content should be 
protected against unauthorized modifications. 

Content transformation in different domains: Given the authentication bit-rate, 
the content to be protected may undergo some practical transformations among 
different domains such as digital-to-analog and analog-to-digital. By using ECC 
20 scheme, the transformed content should be protected against unauthorized 
modifications as long as the bit-rate of transformed content is still greater than 
authentication bit-rate. 

Embodiments of the invention may provide a systematic and quantitative 
25 way for authenticating multimedia content by casting the content into a finer 
representation in terms of ABR. This then brings much convenience for the 
authentication applications by simply keying in one parameter-authentication bit-rate 
to protect the content. 

30 Embodiments of the invention may also provide a framework for meeting 

different authentication requirements from real applications by employing different 
signing modules (fragile, lossless and lossy) which is in line with different JPEG2000 
coding settings. 
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Embodiments of the invention may also provide an ECC-based solution for 
tackling the perturbation problem of extracted features caused by some incidental 
distortions as well as watermari<ing. Furthemriore, the invention can be incorporated 
into PKI without any modifications in terms of system protocols. 

5 

It will be appreciated by a person skilled In the art that numerous variations 
and/or modifications may be made to the present invention as shown in the specific 
embodiments without departing from the spirit or scope of the invention as broadly 
described. The present embodiments are, therefore, to be considered in all respects 
10 to be illustrative and not restrictive. 



